Analysis
- max time kernel
39s - max time network
114s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
04/08/2026, 07:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
安卓_普通版0.2.1.apk
Resource
android-x86-arm-20260325-en
7 signatures
120 seconds
General
- Target 安卓_普通版0.2.1.apk
- Size 58.1MB
- Sample260804-hzlnlsfa45
- SHA256 d67e710a2f3a94e044a16d283d4e4df512073897cfe108c143f30531ea1670a4
- MD5 abe83eaa3c827fd7af8a351d313b5a79
- SHA1 8289d78bdd23c591173c1a7da6c718e67d4eb355
- SHA512 01722525e762fef5591c65e9b1de285977bf3b16a3689f4a28ccea50e78bd98840d9cecd7df0453fca3d13a9b4c4750b5141f95f4a4151b259afef12ee4096ea
- SSDEEP 786432:b0CXOpG0egscgg9cvVCufaAZj1BtSoY6yi8/27JeBZHFlvIe9G7U1NK5Ai:bN+tsHg+HeoY6y15jHFT9bHWAi
- TLSH T1C9D7129141C14B1ED2A60235B8D1943CBDA29F8496460BCAC7597BBA30FEFD8DBB5D30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.DefaultCompany.DaifuRushByMutangM - Checks Android system properties for emulator presence. 1 TTPs 6 IoCs
description ioc Process Accessed system property key: ro.product.name com.DefaultCompany.DaifuRushByMutangM Accessed system property key: ro.product.model com.DefaultCompany.DaifuRushByMutangM Accessed system property key: ro.product.device com.DefaultCompany.DaifuRushByMutangM Accessed system property key: ro.bootmode com.DefaultCompany.DaifuRushByMutangM Accessed system property key: ro.bootloader com.DefaultCompany.DaifuRushByMutangM Accessed system property key: ro.hardware com.DefaultCompany.DaifuRushByMutangM - Checks Qemu related system properties. 1 TTPs 9 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: qemu.logcat com.DefaultCompany.DaifuRushByMutangM Accessed system property key: vendor.qemu.dev.bootcomplete com.DefaultCompany.DaifuRushByMutangM Accessed system property key: ro.kernel.android.qemud com.DefaultCompany.DaifuRushByMutangM Accessed system property key: ro.kernel.qemu com.DefaultCompany.DaifuRushByMutangM Accessed system property key: ro.kernel.qemu.gles com.DefaultCompany.DaifuRushByMutangM Accessed system property key: qemu.hw.mainkeys com.DefaultCompany.DaifuRushByMutangM Accessed system property key: qemu.sf.fake_camera com.DefaultCompany.DaifuRushByMutangM Accessed system property key: ro.kernel.qemu.vsync com.DefaultCompany.DaifuRushByMutangM Accessed system property key: qemu.gles com.DefaultCompany.DaifuRushByMutangM - Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.DefaultCompany.DaifuRushByMutangM - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.DefaultCompany.DaifuRushByMutangM - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.DefaultCompany.DaifuRushByMutangM
Processes
-
com.DefaultCompany.DaifuRushByMutangM1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4229
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Android/data/com.DefaultCompany.DaifuRushByMutangM/files/Unity/local.0fae12538d71119418663e7629c3470e/Analytics/ArchivedEvents/178594529700000.ab67a9df/c
- Size 1B
- SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- MD5 c4ca4238a0b923820dcc509a6f75849b
- SHA1 356a192b7913b04c54574d18c28d46e6395428ab
- SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.DefaultCompany.DaifuRushByMutangM/files/Unity/local.0fae12538d71119418663e7629c3470e/Analytics/ArchivedEvents/178594529700000.ab67a9df/e
- Size 558B
- SHA256 76ab2ad5f1b5154890ca64170d327644d21a5cce18ca69abdbb66f5da1686678
- MD5 ddf2cccea09537ab03567a62cebed013
- SHA1 0e7e7cce215f585bbe7ea98ae54b6258567a169c
- SHA512 5f7713f441b86fe4660a65333180215df85adfe67ce981bbbafbe54b3713726064373c67c5e1bae1abe1753f8713e891f8c43fc8b81944ee2cba70e9af12e121
- TLSH T1FEF02621970BDD3FB1DED9725ACD0C4B4B3D11106052D6FD46F291CE020CEC4A243023
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.DefaultCompany.DaifuRushByMutangM/files/Unity/local.0fae12538d71119418663e7629c3470e/Analytics/ArchivedEvents/178594529700000.ab67a9df/g
- Size 1B
- SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
- MD5 c81e728d9d4c2f636f067f89cc14862c
- SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
- SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.DefaultCompany.DaifuRushByMutangM/files/Unity/local.0fae12538d71119418663e7629c3470e/Analytics/ArchivedEvents/178594529700000.ab67a9df/s
- Size 436B
- SHA256 00c3663fa51ee12146ee21a935535038c8745d3b8eb41da8d61bbffee8d6168b
- MD5 208788ba3ec1d941d3c2ea07d4501a46
- SHA1 a57f3846fedf6acd70f4908e9d8d3c9776d18ebe
- SHA512 fd6be7c47f0d97f3e8e120e96a866c6e87f9ac7305647e48f99257eea2d4a8847e5c24b09450a2f5ad626ddc7f65b36dc078eadb2616ca7af169a08dd83a5434
- TLSH T1F6E0A362DB1EDD3FB2DED5B26BD9084E4B3D65042522E1FE06F291CE4208EC5A253413
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.DefaultCompany.DaifuRushByMutangM/files/Unity/local.0fae12538d71119418663e7629c3470e/Analytics/ArchivedEvents/178594529700001.ab67a9df/e
- Size 580B
- SHA256 2ec3934a1114a260862a1adc00de9343f9c82fbd925f7479ebf357789ea1f12c
- MD5 1427b287b650f86da1ecd4c0bf596669
- SHA1 92baea2abf18371a02ce0d24010949e57ae415ce
- SHA512 8dbed5d95cbd0f5e3898cd8143d8ddd24424d9defda4a8196ea0f4220a1e1846d9cbb8bb5dec4f6d9b83cfb0911fd1c6f12493e76445900875738c757f9b1cbb
- TLSH T1D5F0E1519B49DE3FB1EDD97217C80D4F473D11102166D5FA1AE282C9021CAC4A153013
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.DefaultCompany.DaifuRushByMutangM/files/Unity/local.0fae12538d71119418663e7629c3470e/Analytics/ArchivedEvents/178594529700002.ab67a9df/e
- Size 1KB
- SHA256 68f70716a642c0149165f9e68825612dfc60dcbbd929549ed1492fcf59d15bb3
- MD5 3bc21692e1a759d7a4a4ada95f92d54a
- SHA1 5aaa4391a11b81544ed6d3426e85e67cf5e06030
- SHA512 93fd36e6df33655c8e3d971b189231d674d1b4660b61c8a280d404c1473fb612c6ec1f0c4c7e90773c905f116ff570e7b672544db3681dd7e95494ab4b49e507
- TLSH T1D03196B6DF669C3F3BB6D0DA6FCB1C8B87E861109654DEEF7AD6064C14885406327013
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.DefaultCompany.DaifuRushByMutangM/files/Unity/local.0fae12538d71119418663e7629c3470e/Analytics/ArchivedEvents/178594529700002.ab67a9df/e
- Size 1KB
- SHA256 478f5a6666ce4c75839ce5a8491e8f7b0c423494b9d9a2b7fd3d1944d84eb195
- MD5 12bf7f05c7187de74050943261b0846c
- SHA1 a30abacca78a1405deb6f8b870ccd4d22200b737
- SHA512 67facfc3536dafea99567ee5ac3dd5aaea632e5b5cfa4fe26f00f09af1cbf8a69c41bed646cf342f26b504d5fb70d4cf52e9b3ac0900cb847994efbfeea64e05
- TLSH T1163174A6EF66AC3F7BB6D4D67FCA4D4B87E85120CA94DDEE69D6060C14884409327027
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.DefaultCompany.DaifuRushByMutangM/files/Unity/local.0fae12538d71119418663e7629c3470e/Analytics/values
- Size 133B
- SHA256 6989c504467058e5aedf11028a7aff2f74f7d4e5ee185b1d6c785d7181919b7b
- MD5 965b407ba219c6a8289eee1b23130fd5
- SHA1 ad558653def69d815a29cc54541b90956c6558bf
- SHA512 cd0b49874bfc93a1ee2d090fd5df40098eeb291f706beb003b1ec6a9787efbd8f53f72b6a9ed76e5b6f715e1b1fb7a812725a6fa5823c7e18e4345a02ec3d064
- TLSH T1E4C02B80C904D57728208C2CB283294B46DC2091520C480031650C8C0013002511811B
- MD5 SHA1 SHA512 TLSH